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Abstract - Mobile agents are software nomads that act as your personal representative, working 
autonomously through networks. They are able to visit network nodes directly using available 
computing power and are not limited by platform. This emerging field is now poised to become a 
cornerstone for new Mobile -based ubiquitous computing environments. Mobile agents provide a new 
abstraction for deploying functionality over the existing. In this paper, we present an architecture that 
allows currently available mobile servers to become capable of sending and receiving agents in an easy 
way. We design and implement the MASS (Mobile Agent Systems for Smart applications with CBD). By 
using this approach, existing mobile infrastructure can be maintained, while gaining a whole new 
potential by being able to make use of mobility agent technology. Our approach involves wrapping the 
components inside a Java servlet that can be included in any mobile server supporting the Servlet 
Specification. This servlet enables the servers to receive and send agents that can query local 
information, and also enables the agents to behave as servlets themselves. We currently have used the 
framework with several existing commercial mobile servers, inclusively having th^ sc 
of the framework correctly running and integrated with the security 
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Although mobile agents provide an attractive conceptual framework for mobile device-based 
computing - small threads migrating from server to server, performing their functions, there are still 
many difficulties that must be addressed. These difficulties are currently preventing the widespread 
adoption of the technology. Some of the key problems include: security, user and provider psychological 
resistance, infrastructure integration, interoperability and reliability. 

Security: If one wants to deploy mobile agents into the world-wide-web on wireless mobile devices 
security is a critical issue that must be carefully considered. There are many points to examine when it 



comes to mobile agent security. Because the agents are going to arrive at a host that probably knows 
nothing about them, there must be mechanisms that prevent the agents from damaging the host or 
access information that they do not have permissions to. Also, because the agents are going to execute 
in an open environment, on machines that they may not know them very well, they are extremely 
vulnerable to attacks from those. The hosts can steal information from the agents: make them perform 
actions they did not voluntarily wanted to; or even misguide them into give false information to other 
entities. Finally, the agents must be protected from attacks of other agents running in the same host [2, 

Currently, the mechanisms needed for protecting the hosts from the misbehaved agents and the agents 
from attacks of other agents are well known. These mechanisms are mostly based on proper 
authentication and authorization. Even so, today there is a major technical problem on protecting the 
hosts from the mobile agents. Protecting the agents from the hosts is technically very difficult. Because 
the agents are executing on a host, the host has access to all the state and code of the agent. Although 
there are some promising approaches for solving this problem, like computation with encrypted 
functions and code obfuscation, the problem is still far from being solved. 

Infrastructure Integration: Another relevant issue is how a web site should integrate a mobile agent 
platform into its infrastructure. Currently available systems follow basically two approaches. The first 
one involves installing an agent platform that is completely unaware of the web server. The agents 
migrate to and from the agent platform and interact with the web server as if they were just normal 
clients, with the difference that they are local. Although this approach is appropriate foroperations like 
querying information on the host, or monitoring when certain changes happgn, jfqkife limits the 
functionality that can be implemented on the agents. For instance, it is quite fu|d^y> the agents to 
publish information on the site, or to extend the functionality of the servers by migrating agents into 
them, or even having the agents represented in a web page of the server f(jy1>rft users to remotely 



mth them. 



The second available approach consists in developing a custorr^madei^b server that is also able to 
host agents. The problem is that typically the web sites are abteadftp and running, and do not want to 
replace their existing infrastructure. Also, typically these agen^^mjnced web servers do not have the 
robustness or scalability needed for production-running sitgs.thjl^'it would be quite difficult for a web 
site to accept replacing its industrial-strength web infrasVy0%ure for a technology that follows one of 
the above approaches [4, 5, 6]. ^^^^ 

Reliability: Another very important questio!^^if?lfabliity. If a user is going to send an agent into the 
web, many things can go wrong that can maloktnVagent to be lost. A simple server crash may kill all the 
agents that are running there. Even a jjcmrme^^ration like a server shutdown may lead to the loss of 
the agents running on the server. r' 

There are currently may mechanism^tRar can be applied for ensuring that the agents do not get lost, 
like persistent storage and faulL-tolS*«ft:e techniques. Nevertheless, it is important to carefully consider 
the reliability requirements wheri deploying an agent infrastructure on the web [6]. 

In this paper we presenran architecture that allows currently available web servers and mobile devices 
to become capable oi Mining and receiving agents in an easy way. We also design and implement the 
MASS (Smart Mokile^^ent Systems for Smart applications with CBD). By using this approach, existing 
web infrastruct»Kj\an be maintained, while gaining a whole new potential by being able to make use of 
agent technii^|Vuur approach involves wrapping the components inside a Java servlet that can be 
included in any mobile agent for supporting the smart applications and specification. This mobile agent 
enables the servers to receive and send agents that can query local information, and also enables the 
agents to behave as mobile agent themselves. We currently have used the framework with several 
existing commercial web servers, inclusively having the security mechanisms of the framework correctly 
running and integrated with the security architecture of the server. 
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2. Related Works 

2.1 Agent Concept Model 

An agent is an atomic autonomous entity that is capable of performing some useful function. The 
functional capability is captured as the agent's services. A service is the knowledge level analogue of an 
object's operation. The quality of autonomy means that an agent's actions are not solely dictated by 
external events or interactions, but also by its own motivation. We capture this motivation in an 
attribute named purpose. The purpose will, for example, influence whether an agent agrees to a request 
to perform a service and also the way it provides the service. Software Agent and Human Agent are 
specialization of agent [7, 8]. 

Figure 1 gives an informal agent-centric overview of how these concepts are inter-related. The role 
concept allows the part played by an agent to be separated logically from the identity of the agent itself. 
The distinction between role and agent is analogous to that between interface and class: a role describes 
the external characteristics of an agent in a particular context. An agent may be capable of playing 
several roles, and multiple agents may be able to play the same role. Roles can also be used as indirect 
references to agents. This is useful in defining re-usable patterns. Resource is used to represent non- 
autonomous entities such as databases or external programs used by agents. Standard object-oriented 
concepts are adequate for modeling resources. 




Fig 1. Agent Concept Model 

2.2 Reference Matrix of MA-CBD 

In order to construct component reference architecture, agent is classified in general agent type and 
mobile agent (MA) function attribute in our research as the figure 2 that is a component and Meta 
matrix of based on all above described for Mobile Agent [9]. 
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Reference architecture is consisted of dimension, which has 14 general types and 11 concrete business 
agent types with domain oriented component architecture. These two classification areas tend to be 
independent for each cross-referenced. Each area has its own horizontal and vertical characteristics. 
General agent types are corresponding to agent platform and application. It is possible to develop agent 
system or application by the referencing architecture. The technology of agent can be applied to 
business domain. 
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Our framework was implemented using ihe |.n aliean^ i omp< meni framework, and is centered on the 
so-called Mobility Component. This component provides the basil support tor agent migration and 
management, and an extensibility mechanism that allows other components to connect to it. These 
other components may implement functionalities like different inter-agent communication 
mechanisms, secniii v . persistent e and others. 

One very important aspect of the extensibility mechanism is that it is based on an event model - Agent 
Lifecycle Events. After a high-level service component has registered with the Mohiliiv Component, it is 
notified whenever some state transition occurs in an agent. As an example, consider the security 
component. On being noiilied that an agent is arriving, it can verify its credentials and examine its 
state. If it finds the agent not to be trusted, it can veto the event, prohibiting the agent from arriving. 

We believe that security, from the point of view of the host, is solvable in the near future, depending 
mostly on the adoption of basic resource control methods in the Java platform. Protecting the agents 
from the hosts, it is a complicated problem in the general case, but there are approaches that can be 
used in web agents. These approaches give some security guaranties for the agents running on the web, 
by carefully considering requirements of those agents in the Internet domain. 

Regarding the resistance of the users on using mobile agents, it is necessary to provide a stronger focus 
on the applications that use agents, and not on the agents themselves. We believe that the user doesn't 
even need to be aware of the agents or the agent platforms. What he needs to see and interact with are 
the applications. On the other hand, convincing the web hosts to introduce the technology into their 
sites is basically a question of market, and maturation of the agent technology . # Whjmp^ technology 
comes to a point where the providers can be assured that there is no dangery^otoloying such a 
framework on their infrastructure, they will give such functionality to their users. Trj£ will allow them 
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3. Mobile Agent with Existing Mobile Da*T\g^fnfrastructure on CBD 




Our interest in building support for mobile £geWs in web serves arouse from the necessity of validating 
how easy or not was to agent-enable exMin||toj^ftations by using the MA framework. Web si 
and in particular the creation of web-a^taTt^|r>peared to be an interesting application field because the 
paradigm seams so fit for using on the ^refW'' 

In the case of our framework, this 4^rn*d to be perfect since this adapter could be used for housing the 
Mobility Component. For this jttrtiijrrar system, we had three requirements: 

• It should be pojtffst^br the agents to behave as a web resource (i.e. publish information). A 
user should beS\le to use a web browser to access and interact with the agents that would be 
dynamicaltj^eSorating the web pages. 

• The agenA should be able to query local information present on the web server. 

• If pojeiffl^ithe agents should be able to perform management operations on the server. This 
last reqikrement was based on our interest in studding the usefulness of mobile agents for 
distributed network and application management. 

3.2 Architecture 

To meet the above requirements, we came up with the architecture, named MASS architectures 
depicted as in figure 3. The Mobility Wrapper is a class that overrides the HHP Frame and houses the 
Mobility Component. This u rappci also listens to I he . \acnl I »/« \r/c /.'rai/.s. Thus, at any given time it 
knows the state of every agent in the system, and publishes 1 his 1nlorm.1l ion into a URI. This means that 
a user accessing the web site is able of seeing which agents are presently running on the server. The 
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information published by Mobility Wrapper about each agent is accompanied by a link, which includes 
the identity of the agent. The wrapper is able to do this because when an agent arrives, it receives the 
corresponding event and saves a reference to it. Also, when an agent migrates or dies, the wrapper also 
receives an event and is able to garbage-collect that reference. The bottom line is that it is possible for a 
user to interact with the agents currently running on the web server by simply accessing a starting page. 
Another interesting point of this approach is that because in the MA framework the agents arrive and 
interact with the applications from the inside, the agents have access to the internal objects of the 
applications. 

\ 

WEB SERVER 




Fig 3. MASS Architectures 

Fig 3. MASS Architectures 



3.3 MASS-CBD Process 
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Fig 4. MASS-CBD process 



3.4 Mata Information Description for Mobility Smart Servlet Container 

The key idea to build server-independent support for mobile agents was that the HTTP Frame interface 
was not providing much more than what could be provided by the Servlet Specification. The HTTP 
Frame is only providing a hook for mapping an URI to an object inside of the web server that can 
respond to the HTTP requests. This can be accomplished with a servlet. The servlet technology provides 
a simple mechanism for extending the functionality of a web server, allowing URIs to be associated with 





In our research, we apply-fl*(AlASS-CBD mata description for servlet container and its Mass repository 
as shown in figures. TijeSe instances are called servlets, and are able to process requests sent to them. 
Currently there arey^nSiy^veb servers supporting the Servlet Specification, and there are many stand- 
alone servlet engmles nrat can be connected to the web servers for providing servlet functionality. Thus, 
migrating theyvvWj^er into a servlet container would allow us to run the framework in any web server 
or servlet engrfH that supported the specification. Several issues were brought up considering this 

Our first concern was if it would not be too heavy to run the framework on a servlet engine. Our 
expectation was that it would not be, since the main component, which was the one being used, has a 
very small footprint and while running is also very lightweight, offering good scalability. The second 
point that we considered was that currently there is no uniform manner by which the agents can access 
the information on the web server. Making the agents behave as data sources associated with, since the 
servlet can forward the requests to the appropriate agent. The problem arises when an agent has to 
access the information stored locally on the web server. The most straightforward approach, and the 
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one that we adopted, was to have the agents read the information as just an ordinary client. Although 
there is a small performance penalty, it is not very significant since the agents and the data source are in 
the same machine, and the loop back interface provides very large bandwidth. Figure 6 is a static and 
dynamic model for MASS modeling with UML. 
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3.5 Implementation Architecture 



First, the web server may be decoupled from the servlet engir 
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running agents and for the host. Figure 7 shows the ap^rJtacj»<Tt should be noted that it 
to decouple the web server from the servlet engine. If t^g/web server supports the Servlet Specification 
by itself, then the container may be install^LjlfRk configured on the web server itself. The biggest 




Fig 7. The mobility servlet 

The MASS framework provides the concept of services for agents. What this means is that an agent on 
arriving at a host can query which are the currently available services, and request an object 
implementing that service interface. That idea was used in our implementation. When an agent arrives 
at a web server, it may not only query the local web server, but it can also ask for a service instance that 
allows it to behave as a smart mobile device. Servlet, and publish information. 
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Fig 8. Implement the MASS sei 

When an agent requires an object that allows it to publish iijfl^|m/Bon, the object that is passed actually 
requires that the agent to implement the MASS servlet interfc^^is in Figure 8. 

This is important since allows the agents to distmguislWetween different clients, and act accordingly. 
Figure 9 shows the implementation of the MAS^^fenm a? servlet. 
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Fig 9. Implementation of the MASS Agents as servlets 
3.6 Security 

In our container, the Security Component is instantiated and provides several protection services for the 
agents and the host. This component allows the agents to migrate between hosts using SSL, which prevents 
tampering and eavesdropping on the contents of the agents [2]. It also implements a fine-gained 
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authorization mechanism that guaranties that only the agents with the correct permissions can perform 
certain operations, like reading directly from disk, or connect to other hosts in the network. Finally, the 
component implements cryptographic primitives that allow secure protocols for information gathering and 
comparison-shopping using out smart agent, that use mobile agents, to be implemented in an easy way. In 
our approach, the main problem to be solved concerning security is resource control. Since the Java 
complicated issue. We are currently investigating the possibility of using third-party resource control 
libraries with our system, and its implications in terms of runtime penalty. 



3.7 Adding New Service 

On interesting aspect of our system is that it allows different services to be instantiated and made available 
for the agents at runtime. It's makes the framework very flexible for implementing different features on 
different web sites. 



For instance, let's suppose that a programmer wants to implement a marketplace^fcr^gents, where the 
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programmer can use the basic architecture described here and configure the l^j^TMif Component to load 

;/a^inVr-a 



one or more of the different available components that implement sevel^ 
mechanisms. A^^^ 

r \ 

Our experience is that the MASS framework provides a nice dtor»th fer integrating mobile agents into 
existing web infrastructures. One of the most fascinating charact^kticVbf the approach is that after having 
the basic infrastructure deployed (the container servlet), am£ ^ewjrunctionality can be easily introduced 
into the existing web infrastructure. The main limitation fi nVu^njiHi the framework has to do with resource 
control. Currently the framework is only usable in a secu^^kaVrin an intranet or on an extranet. 



We currently have experimented with th^rcnWew^fk in several web and mobile devices servers and servlet 
engines, with very positive results. For ej^iHn?Kiting with the framework, we have built some prototype 
applications. Two of the most interestinJ^raart applications are: We will now examine some performance 
results of the distributed agent-base^^awler application. Although these are not extensive tests, they are 
useful to show the performance^ainsrWat can be expected by using a mobile agent-based approach while 
building distributed application 
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Fig 10. MASS Systems structure based on .net Framework 
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Figure 10 shows the MASS systems structures based on .Net 
execution sample on MASS. It is a sample to find the cost effectg 
to setup an experimental framework that allowed us to test tha^ 
approach from indexing a web site. Another application thai 



eworfe. Figure 11 shows the clients 
al camera with MASS. We decided 
-based approach vs. the client/server 
veloped was a distributed site-indexing 



system (a mobile agent-based crawler). In this applicat^ia^j^ user specifies a site that he wishes to be 
indexed, and an agent jumps to that site performing the jp^xation locally. Because building the complete 
index of a site requires that all the pages of tfie^ite t^oe accessed, using an agent that performs the 
operations locally is much less expensive in teftn^Wtiwie and bandwidth than bringing the complete site to 



ication are discussed in the next section. 



the local machine. The performance results^^^^^pTic 

Conclusion 

& 

In this paper we have presented our a^j^iences on using the MASS component framework for developing 
smart mobile agents. The MASS'compDnent framework in our work can be added into existing applications 
for agent-enabling them, prcwicrrfc^ the support needed for receiving and sending agents in an easy way. In 
this work, we have built Aaretiitecture that allows any web and mobile device server that supports the 
servlet specification ftyfcAe agents. The main features of the architecture are: 

• Any web an\mobile device server that supports the Servlet Specification is able to receive and send 
agents^^X ™ 

• The execution of the agents is restricted by proper authentication and fine-gain authorization 
mechanisms, so long as the existing security manager has not been modified in a way that is not 
compatible with the Java 2 security delegation mechanism. 

• The agents are able of processing HTTP requests, having session information, as well as acting as 
regular servlets. 

• It is possible to dynamically load new services, adding new features at run time. This makes the 
approach very configurable and capable of addressing different requirements of different sites. 

• It has a small footprint and a lightweight execution environment. 

In this paper we also discuss our experiences on integrating the framework components into off-the-shelf 
web and mobile device servers, enabling them to receive and send agents. Our approach does not involve 
deploying a stand-alone agent server that is not integrated with the web and mobile device server, nor does 
it require a specialized costume-made web and mobile device server. We provide a framework that is able 
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of using existing web and mobile device infrastructures, giving them the capability of using agents in their 
operation. Our framework also provides a very strong security model, with authentication and 
authorization mechanisms that control incoming agents, and cryptographic primitives that are useful to 
protect the integrity and confidentiality of the agents. This is essential if an infrastructure is going to be 
deployed on an open environment. 
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